{"vulnerability": "ghsa-8frh-vhgh-64cf", "sightings": [{"uuid": "d052f62a-4276-4daa-a721-ddb4e6de465a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-8frh-vhgh-64cf", "type": "seen", "source": "https://gist.github.com/alon710/cba9cd0b7b8bf1e82dc1ef5c661263b6", "content": "# CVE-2026-55479: CVE-2026-55479: Incorrect Authorization Check in Snipe-IT Legacy License Check-in Flow\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55479\n\n## Summary\nSnipe-IT prior to version 8.6.2 is vulnerable to an incorrect authorization flaw (CWE-863) within its legacy single-seat license check-in workflow. The application incorrectly validates authorization using the 'checkout' permission instead of the 'checkin' permission. This allows authenticated users who are authorized only to assign licenses, but explicitly restricted from unassigning them, to directly access and execute license seat check-ins, bypassing intended role-based access controls.\n\n## TL;DR\nAn authorization logic error in Snipe-IT allows low-privilege users who only possess license checkout (assignment) permissions to bypass restrictions and execute license check-ins (reclamations), potentially disrupting asset tracking states.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 4.3 (Medium)\n- **CVSS v4.0 Score**: 5.3 (Medium)\n- **Exploit Status**: none\n- **CISA KEV Status**: False\n\n## Affected Systems\n\n- Snipe-IT installations prior to version 8.6.2\n- **snipe-it**: < 8.6.2 (Fixed in: `8.6.2`)\n\n## Mitigation\n\n- Upgrade the Snipe-IT instance to version 8.6.2 or later immediately.\n- If immediate upgrade is not possible, apply the manual PHP patch to LicenseCheckinController.php.\n- Audit active user roles to ensure that 'checkout' and 'checkin' permissions are correctly delineated.\n\n**Remediation Steps:**\n1. Navigate to the Snipe-IT root directory on the hosting server.\n2. Run the standard update scripts or pull the latest stable release (v8.6.2) from the official repository.\n3. If manually patching, locate the file 'app/Http/Controllers/Licenses/LicenseCheckinController.php'.\n4. Replace instances of '$this->authorize(\"checkout\", $license)' with '$this->authorize(\"checkin\", $license)' within both the create and store methods.\n5. Save the file and clear the application cache using the command 'php artisan cache:clear'.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/grokability/snipe-it/security/advisories/GHSA-8frh-vhgh-64cf)\n- [NVD Vulnerability Detail Page](https://nvd.nist.gov/vuln/detail/CVE-2026-55479)\n- [CVE.org Authoritative Vulnerability Record](https://www.cve.org/CVERecord?id=CVE-2026-55479)\n- [Wiz Vulnerability Database Profile](https://www.wiz.io/vulnerability-database/cve/cve-2026-55479)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55479) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T18:32:25.181749Z"}]}